Force input of a name to guest comments Force input of a name to guest comments
 

News:

cpg1.5.48 Security release - upgrade mandatory!
The Coppermine development team is releasing a security update for Coppermine in order to counter a recently discovered vulnerability. It is important that all users who run version cpg1.5.46 or older update to this latest version as soon as possible.
[more]

Main Menu

Force input of a name to guest comments

Started by Ryukia, September 15, 2005, 05:51:02 PM

Previous topic - Next topic

0 Members and 2 Guests are viewing this topic.

Ryukia

Hi,

How can I set up or modify Coppermine in the way that guests are forced to input something in the name field before a comment is saved?

My Problem is, that someone used a picture grabber software on our gallery which resulted in dozens of of comments with the name "Dein Name" and all available smilies shown in the comment field, as the grabbing software was following each link (chosing smilies) and finally using the OK-Link which saved the whole thing... :-\\

Thx
  Ryukia

Joachim Müller

The "OK" link is not actually a link, but a submit button. I have never heard of software that "pushes" buttons deliberately. What logic should possibly be applied to stop the comment if it's non-empty: some people just enter a smiley as their comment. I recommend that you disable comments for anonymous users instead.

Ryukia

Quote from: GauGau on September 20, 2005, 08:36:14 AM
The "OK" link is not actually a link, but a submit button. I have never heard of software that "pushes" buttons deliberately.

Well, the software he used was Picaloader. Seems to act quite aggressive...

QuoteWhat logic should possibly be applied to stop the comment if it's non-empty: some people just enter a smiley as their comment. I recommend that you disable comments for anonymous users instead.

Not the comment field, the name field. Guests should be forced to enter something in the name field

Same problem with users who think they are logged in but aren't. Comments are saved unter the name "Dein Name"

Ciao
  Ryukia

Joachim Müller

like I said: I recommend disabling anonymous comments. You could as well code an additional check that only sends the from if the name is not empty and is not "Dein Name".